7 unchanged sentences
ISG also maintains certification across other cyber security frameworks, including the Trusted Information Security Assessment Exchange and UK Cyber Essentials.
−Removed: In 2024, the Company achieved a System and Organization Controls 2 (“SOC2”) Type 1 against our GovernX platforms, and we are preparing to continue maturity in this area by seeking to attain SOC2 Type 2 in 2025.
+Added: Following an independent third party audit of the ISG GovernX and Executive Insights Systems against the Description of a service organization system in a SOC2 Type 2 Report (AICPA, Description Criteria), ISG was able to provide reasonable assurance that our service commitments and system requirements were achieved based on the trust services criteria relevant to security, confidentiality and availability.
The Company’s cybersecurity efforts are led by the Chief Information Security Officer (“ CISO ”) , who reports to the Chief Information Officer (“CIO”) and has responsibilities that cover the management of cybersecurity risk and the protection and defense of our networks and systems.
7 unchanged sentences
In addition, the IEB makes decisions on resourcing and project prioritization in support of our cybersecurity and compliance initiatives.
−Removed: Responsibility for cybersecurity risk has been delegated to the ISC, which consists of senior executives (including three IEB members), namely our Chief Financial Officer (IEB member), Chief Human Resources Officer (IEB member), Chief Information Officer, Chief Data and Analytics Officer (IEB member), Chief Information Security Officer, Legal Counsel, Director of Corporate Governance and Data Privacy Manager.
+Added: Responsibility for cybersecurity risk has been delegated to the ISC, which consists of senior executives (including three IEB members), namely our Chief Financial Officer (IEB member), Chief Human Resources Officer (IEB member), Chief Information Officer, Partner, Data Analytics & Technology Office (IEB member), Chief Information Security Officer, Legal Counsel, Director – Workplace Services and Senior Manager, Compliance & Data Privacy.
The ISC oversees the management of processes for identifying and mitigating cybersecurity risks, material vulnerabilities and high-rated incidents to help align our risk exposure with our strategic objectives.
19 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.